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SOSS FREE / OPEN SOURCE SOFTWARE: 32 








Serve : Freedom to use software to meet one's own needs 
Study : Freedom to study & modify the software 


Share : Freedom to redistribute the modified / original version 





EP {à em em 
eve» Brief history of FOSS 
Richard Stallman 
- Father of FOSS 
-- Set up the Free Software Foundation 
(FSF) in 1984 
-- Started the GNU project to create 
a Free Operating System 
-- Personally created free software like 
GCC (C Compiler), GDB (debugger), 


Emacs (text editor) and a host of tools 
Linus Torvalds developed Linux, a Unix-like kernel 
-- defacto kernel for GNU OS 
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Brief history of FOSS aona. CSAC 





* Perl, PHP, & Python (scripting languages), X windowing system, 
GCC Compiler 


* Apache server, MySql / PostgreSql databases 


* Gimp, Blender and a host of other packages 


* Above all, internet provided the medium & impetus 
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FOSS Concept CDAC 





"Free as in Freedom” 
does not mean “No Cost”, but refers to the absence of constraint 
The four freedoms: 


O. to use the software for any purpose 

1. to study the software 

2. to modify the software 

3. to share/distribute the original & 
modified versions 





Proprietary 

Owned by Company/individual 
Usually given in binary form. 
Users have restriction on its use 
Cannot modify it 


Cannot copy 


Software Types CDAC 


Free/Open Source 

Ensures 4 freedoms 

O Use for any purpose 

1 Study and adapt(modify) 

2 Distribute for free or fee 

3 Distribute the modified source 


source code is mandatory for 1 and 
3 


Free as in Free Speech and not as 
in Free Lunch 
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FOSS Advantages 


Reliability, Modularity, Flexibility 





Security, Combats piracy 

Total Cost of Ownership - Low 
Non-Quantitative issues 

Freedom from control by others 
No vendor lock-in, combat piracy 
Protection from licensing litigation 
Social / Moral / Ethical correctness 


Freedom to innovate and be creative 
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Designed 

for Indian 

environm 
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Localised 
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Aimed to 
bridge 
digital 

divide in 

India 


Based on 
Debian 


Input 
support 
for Indian 
languages 


EduBOSS 


BOSS 
Advanced 
Server 








* 22 Indian language support 
e Office Tools & Browsing 
e Hardware and peripheral support 


e Edutainment 
e Maths , Physics and Social Studies 
e Tools for Teachers 


+ Database, FTP, Proxy etc servers 
e Thin client server 
+ Network analysis and Migration tools 
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BOSS Vs Windows CDAC 


Hardware Compatibility 


Applications 


Security 


For Windows one needs min configuration of 1GHZ processor+2GB RAM +30GB 
harddisk., whereas for BOSS min is 1 GB RAM+15GB harddisk 


Starting from Windows Media center till Photoshop, BOSS has equivalent 
applications. Few are listed below 


MS Office - Libreoffice , Abiword 
PhotoShop - GIMP, Blender 
Itunes - Banshee , Totem 


Outlook Mail- Evolution , Thunderbird 


Windows is always open to Malwares and virus attacks and its always hard to enable 
security in the machine for an end user. BOSS provides all EAL4 listed security 
features and a one stop solution for implementing all the security features. 





System Requirements 


Atleast 1GB MB 


Atleast 15 GB 


32-bit (x86) or 64-bit (x64) 








CDAC 


Windows 8 


Windows 8 Home Basic - 2 GB 
Windows 8 Home Premium - 2 GB 
Windows 8 Professional - 2 GB 
Windows 8 Ultimate - 2 GB 


Atleast 30 GB 


32-bit (x86) or 64-bit (x64) 
processor 


Windows 8 Home Basic * 
Windows 8 Home Premium * 
Windows 8 Professional * 
Windows 8 Ultimate * 





Features 


Vulnerability 


Office Suite 


Miscellenous Software 


Language Support 


Ibus 


CM 
BOSS 6.0 Windows 8 
Secure - as it has the traditional user Third party anti virus softwares 
privileges mechanism present in linux by have to be installed for 
default protection. 
Libreoffice. MS Office Suite 
Price - Free Price * 


Has “Software Center” and “Synaptic Software has to be purchased 
Package Manager”, where more than from separate vendors mostly 
18,000 software applications can be for a cost. 

installed in a single click. 


Supports 18 Indian languages. Does not support Indian 
languages (No Indian "Language 
Pack is present", only "Language 
Interface Packs" are present) 


Available for Indian Languages. No 





Features 


Media Player 


Photo Manager 


Image Manipulator 


Antivirus 


Codec support 





CDAC 


BOSS 6.0 Windows 8 


Totem Movie Player Windows Media Player 


F-spot with public photo Picasa Photo manager* 
albums sharing and photo *Need to be installed 
editing features separately 


GIMP raster graphics editor Not included. 
- Free Option: Adobe Photoshop* 


Klamav Antivirus - Free Not included. 
Updated daily with online 
virus database 


Support for all major audio Support for all windows 
and video formats. and other proprietary 
formats. 








Support group setup at C-DAC Centres spread across the country. 


Support group has also been setup at State Nodal agencies. 


National help desk facility setup in C-DAC Chennai. Currently calls attended in English, 
Hindi, Tamil, Telugu, Kannada, Malayalam. 


Support groups to be setup at Academic institutions. 


You can explore the 


> IRC channel. 

> Join BOSS mailing lists. 

> Join Users and Developers forum. 

> Report a bug through the bug reporter tool. 





Advantages of BOSS Linux Over SF 


; COE AC 
Windows 
BR. 77-- 


^ BOSS OS is Completely Free 
y BOSS OS is free from virus attack 


^ A More than 30000 free Applications are available in 
BOSS Repository 


^  BOSSOS is developed by CDAC Chennai and the 
Support is easily Available 





^ A Unicode Font is fully Supported in BOSS 

^ All the free drivers are bundled default with BOSS 

. Equivalent Application for windows are Available in 
BOSS 


Necessary Training and support will be provided by CDAC for 


migration to BOSSLinux 








Constraints 





> People Should get the Exposure of BOSS OS. 


> Windows specific Application and peripherals need to be 
analyzed for case to case and necessary changes need to 
be implemented to make as OS free component 


> People Mindset Should get Change from Windows to 
BOSS OS. 
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Government order Provided by TN" 








ABSTRACT 


Information Technology Department - Mandatory installation of BOSS Operating 
System (an Open Source Operating System developed by C-DAC) in all the 
Computer Systems and should be used by Staff Members of Information Technology 
me Orders — Issued. 





G.O. (Ms) No.15 .  Dated:09.11.2011 


Read: 
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What's it for? 





User-friendly OS for schools. 

Developed in collaboration with teachers. 

Provide teacher support tools 

facilitate creation of interactive teaching materials. 


No need of great technological knowledge. 


Used from primary to high school. 
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CDAC 
Punjab 
— Edusat' Society. 
- PICTS 


No.of Schools 6845 
No.Of Desktobs*50000 


Haryana 
C ICT 


No.of Schools XY? 
No.Of Desktops 133000 


Chandigarh 


~ Department of If 


Chandigar h Administration 
Schools) 


No.of Schools :96 
No.Of Desktops :1500 


Maharashtra 
— Secondary and Higher 
Education Schools 


No.of Schools :5000 
No.Of Desktops :60000 
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Leaner, less resource hungry version - 512 
MB RAM, older processors. 


Developed in collaboration with teachers. 


Bundled content to lessen connectivity 
Issues. 


Robust system with granular controls to 
enable students to play around with the 
system with lesser monitoring and greater 
flexibility. 


GCompris 








Features of EduBOSS zt Sch 


'Periodic Table' 


File View Tools Settings Help 


| Classic Periodic Table v | Schemev Gradientsv E] Isotope Table X Molecular Editor » 
Information Search: | | 


lul Overview 


[fe] View 
Calculate 
Legend 


Block 
M f-Block 


Seaborgium (106), Mass: 271 u 


Features 





* Linux Kernel 
e GNOME Desktop Environment 
* Default support support for 
Printers 
video cards 
scanners 
Cameras 


Wifi and Lan cards 


+ Office Productivity Suite 











Features 





Internet applications : 


Iceweasel and Chromium Web browser 


With Indic language printing support and HTML5 support 


Evolution mail client 
Bittorrent client 
microblogging client to configure all social networking blogs 


Remmina remote desktop client for both Windows and Linux 
desktops 


Pidgin Internet messenger with more plugins for different 
protocols 





Open source Licenses DAC 





The following OSI-approved licenses 
are popular, widely used, or have 
strong communities: 


s Apache License 2.0. 


° BSD 3-Clause "New" or 
"Revised" license. 


: BSD 2-Clause "Simplified" or 
"FreeBSD" license. 





° GNU General Public License 
(GPL) 

: GNU Library or "Lesser" General 
Public License (LGPL) 

° MIT license. 


° Mozilla Public License 2.0. 


DFSG WISH 





Some of the Debian free 
software guidelines 


Free redistribution. Debian Free Software Guidelines 


Inclusion of source code. 


£ 


E 


£ 


Allowing for modifications and 
derived works. 


a Integrity of the author's source 
code 


The license needs to apply to 
all to whom the program is 
redistributed. 


a The OPL, BSD licenses are 
examples of licenses 
considered free. 


LT 





https://en.wikipedia.org/wiki/File:Openlogo-debianV2.svg 





Freedom to use the 
software for any 
purpose. 


Freedom to change the 
software to suit your 
needs. 


Freedom to share the 
software with your 
friends and neighbours. 


Freedom to share the 
changes you make. 
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A Quick Demo CDAC 





DEMO FOR DIFFERENT 


APPLICATIONS IN BOSS 6.0 





Thank You 








Basic Linux Commands 


Centre for Development of Advanced Computing, Chennai 








File System Commands Ui sd 
COCC 








e mkdir — make directory 
usage: mkdir <dirname> 
eg: mkdir -p path/test/test I 


-p --> no error if existing, make parent directories as needed 


e cd- change directories 


Use cd to change directories. Type cd followed by the name of a directory to 
access that directory. 


e my- change the name of a directory 


Type mv followed by the current name of a directory and the new name of 
the directory. 


Ex: mv testdir newdirname 


Centre for Development of Advanced Computing, Chennai 





File System Commands Ui sd 
COCC 








cp - copy files and directories 
usage: cp source destination 
cp -1 myfile yourfile 


With the "-1" option, if the file "yourfile" exists, you will be prompted before it is 
overwritten. 


cp -r srcdir destdir 
Copy all files from the directory "srcdir" to the directory “destdir" recursively. 
rmdir - Remove an existing directory 
rm - remove files or directories 
Usage: rm -r name 
Removes directories and files within the directories recursively. 
mount - Displays all mounted devices, their mount point, filesystem, and 


access. 


Centre for Development of Advanced Computing, Chennai 





Shell Metacharacters qq SH 
CJEG 








Metacharacters -These are special characters that are recognized by the shell. 
* - matches O or more characters. 

eg: Is *.c 

? - matches any single character 

eg: Is ab?.c 

[| - This will match any single character in the range. 

eg: Is tut[0-9].m 

This will find files such as tut0.m, tut9.m etc., 

> - Redirect standard output to a file. 


echo "hello world" » hello.txt 


Centre for Development of Advanced Computing, Chennai 





Basic Linux Commands 


uname - print system information 

eg: uname -a 

diff - find differences between two files 

diff [options] from-file to-file 

eg: diff -u testfilel testfile2 

sort —reorders lines of text file. 

eg: sort testfile 

To remove duplicates use -u option with sort command 


sort -u testfile 


Centre for Development of Advanced Computing, Chennai 
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Basic Linux Commands we Sh 





e man displays the documentation for a command 
usage: man <command name> 


eg: man mkdir 


Centre for Development of Advanced Computing, Chennai 


File Handling Commands Ui SH 
COCC 








* cat- used to display the contents of a small file on terminal 
usage: cat <file name> 
* more and less commands are used to view large files one page at a time 
usage: more «file name» 


usage: less «file name» 


Centre for Development of Advanced Computing, Chennai 
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File System Management 


Centre for Development of Advanced Computing, Chennai 
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File System CDCC 


2 A file system is the method and data structure that an operating 
system uses to keep track of files on a disk or partition. 


? [t organizes these files for storage, manipulation, and retrieval by the 
computer's operating system 


2 Linux views all file systems from the perspective of a common set of 
objects. 


+ The objects are 
2 Superblock 


2 Inode 
2 Dentry 
+ File 


Centre for Development of Advanced Computing, Chennai 





Partitioning CDCC 


Disk partitioning is the act of dividing a hard disk drive into 
multiple virtual hard disk drives, referred to as partitions 


A partition is a contiguous set of blocks on a drive that are 
treated as an independant disk 


A maximum of four partitions can be placed on any hard disk. 
These are sometimes called primary partitions. 


One of the four partitions may be designated as an extended 
partition. This partition may then be subdivided into multiple 
logical partitions. 


Centre for Development of Advanced Computing, Chennai 


Partitioning in Linux CDCC 
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* There are two kinds of major partitions on a Linux system: 


* Data partition: normal Linux system data, including the root 
partition containing all the data to start up and run the system; 
and 


* swap partition: expansion of the computer's physical memory, 
extra memory on hard disk 


Tools/Software 
e fdisk 
* gparted 


Centre for Development of Advanced Computing, Chennai 
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Swap Partition CDCC 


Linux requires a “swap” partition to use for a disk cache. 


It is a space to write data to when all the physical memory is 
used up. 


Can be created using gparted, by selecting filesystem type to be 
“linux-swap” 


Centre for Development of Advanced Computing, Chennai 











DIN) ESSENTIAL USER COMMAND BINARIES 
¡Wiololo 17 STATIC FILES OF THE BOOT LOADER 


fi [o ev/ DEVICE FILES , 'home/student/dir 


| l HOST-SPECIFIC SYSTEM CONFIGURATION 
/etc/ 


RICUIRID DIRECTORIES: GPT. xi), TOAL DAL 













/// WiaYejaalsii USER HOME DIRECTORIES 
j| TA ESSENTIAL SHARED LIBRARIES A | 
AND KERNEL MODULES E et 


RERO | Y TET MOUNT POINT FOR REMOVABLE MEDIA 
OF THE ENTIRE EF 


FILE SYSTEM PE oe MOUNT POINT FOR A TEMPORARILY 
HIERARCHY — ! | MOUNTED FILESYSTEMS 





FILESYSTEM HIERARCHY 
STANDARD ( FHS ) 


/ E | opt/ ADD-ON APPLICATION SOFTWARE PACKAGES 


PRUMARY HIERARCHY | : 3 fsb al SYSTEM BINMARTES 












ee DATA FOR SERVICES 
=18 PROVIDED BY THIS SYSTEM 


due M 


| Aaa (MULTI-JUSER UTILITIES AND APPL 
r | | - i FÉCONDARTF HIERARCHY WS hoe 
: REQUIRED DIRECTORIES: BIN, INCLUDE, LIB, LOCAL SEIN. SHARE 





TEMPORARY FILES | 'usr'hocal/bin 











| root! HOME DIRECTORY FOR THE ROOT USER 


VIRTUAL FILESYSTEM DOCUMENTING KERNEL 
AND PROCESS STATUS AS TEXT FILES 


LNUXCONFI G. ORG 


/proc/ 
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Mounting CDCC 





* Mounting a device/partition means attaching it to the linux file 
system. Its done using the linux command ‘mount’ 


* A mount point is a location on the file system tree 
* Usage of mount command, 
mount -t type device dir 


tells the kernel to attach the file system found on device (which 
is of type 'type') at the directory dir. 


Example : 


mount -t iso9660 /dev/cdrom /media/cdrom 
Optical disks use the ISO9660 format 


Centre for Development of Advanced Computing, Chennai 


Mounting ISO image CDCC 





e An ISO image is an archive file (disk image) of an optical disc 
using a conventional ISO format. 


* [SO image files typically have a file extension of .ISO 
Steps 

* Login as root user 

* Create a mount point “ mkdir /mnt/disk” 

e mount -o loop disk1.iso /mnt/disk 

Note 


Mounting a file containing a filesystem via such a loop mount 
makes the files within that filesystem accessible. 


Centre for Development of Advanced Computing, Chennai 


| en 
Unmounting CDCC 





* umount is the command used for unmounting 


* It instructs the operating system that the file system should be 
disassociated from its mount point, making it no longer 
accessible. 


Usage : 
umount /dev/sdb_ ----- > based on device 
Or 
umount /mnt/usb ----- > based on mountpoint 


Centre for Development of Advanced Computing, Chennai 





Ei sh 
Labels CDCC 


Volume labels make it possible for partitions to retain a 
consistent name regardless of where they are connected, and 
regardless of whatever else is connected. 


Labels are not mandatory for a linux volume. 
Each can be a maximum of 16 characters long. 


e2label or tune2fs command can be used to set/change label of 
the filesystem. 


Centre for Development of Advanced Computing, Chennai 


AES 
UUID CDEC 





¢ UUID is Universally Unique Identifier 


e With UUID Linux kernel should automatically find and map 
(mount to exact location) volumes to storage device. This saves 
lots of time and avoid /etc/fstab breaks. 


* UUID's for a device can be found using the following commands, 
* blkid 
e ls -1 /dev/disk/by-uuid 


Centre for Development of Advanced Computing, Chennai 


Ei sh 
/etc/fstab... CDCC 





Sample entries of /etc/fstab file : 


based on /dev 


/dev/sda2 / ext3 defaults 0 1 


based on UUID identifiers 


UUID=24f28fc6-717e-4bcd-a5f7-32b959024e26 / ext4 defaults 
0 1 


Centre for Development of Advanced Computing, Chennai 
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DODD Recovering corrupted filesystem  cocc 








ə Tools used, 
® fsck — filesystem check and repair 
+ testdisk - partition recovery utility 


2 photorec — recovers lost files from hard disk 


Centre for Development of Advanced Computing, Chennai 
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File System Maintenance CDCC 





* File System checked at bootup 
e Maintaining consistency with fsck 


fsck 


- fsck (file system check) is a tool for checking the consistency 
of a file system. 


- [tis run automatically at boot time when the operating 
system detects that a file system is in an inconsistent state, 
indicating a non-graceful shutdown, such as a crash or power 
loss. 


- [t is also run manually by the system administrator. 


Centre for Development of Advanced Computing, Chennai 
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File System Maintenance... CDCC 





° Steps to use fsck manually 
- Unmount the filesystem to be checked 
e umount /dev/sda3 
- Now run fsck on the partition 
e fsck -t ext3 /dev/sda3 
- Once fsck is finished, remount the partition 


e If any files are recovered then they are placed in /lost+found 
directory by fsck command. 


e Forcing fsck on next reboot 
- Run the following command with root privilege 


e shutdown -rF now 


Centre for Development of Advanced Computing, Chennai 





BOSS Linux Installation & 
Configuration 


Hardware Overview 


Minimum Hardware Requirement 
e 1GBRAM 

e 40 GB Hard Disk 

e Dual Core Processor 


Civilnet Installation 
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PA O u- 
SSI: to boot or TAB to edit a menu entry 


select a Language 


ahcccli1 [Running] - Oracle VM VirtualBox = n x 





File Machine View Input Devices Help 


Indian Version of GNU/Linux 





Select a language 


Choose the language to be used for the installation process. The selected language will also be the 
default language for the installed system. 


Language: 
Bangla - FRA 
dei genes eee een 
| Gujarati -— smed) 
Hindi - fet 
Kannada - 3833 
Malayalam - mEM IKS. 
Marathi - må 
Punjabi (Gurmukhi) - ut 
Sinhala - Bs 
Tamil - æa 
Telugu - 2050 


Screenshot | GoBack | 
Où GP ul E UU SE) Right Ctrl 


Select Location 


ahcccli1 [Running] - Oracle VM VirtualBox 
File Machine View Input Devices Help 


Indian Version of GNU/Linux 





Select your location 


The selected location will be used to set your time zone and also for example to help select the system 
locale. Normally this should be the country where you live. 


This is a shortlist of locations based on the language you selected. Choose "other" if your location is not 
listed. 

Country, territory or area: 
Antigua and Barbuda 

Australia 

Botswana 

Canada 


Hong Kong 





Ireland 

New Zealand 
Nigeria 
Philippines 
Singapore 
South Africa 
United Kingdom 
United States 
Zambia 





Screenshot | 


BOR SJ ads 5 SE) Right Ctrl 


Configure the Keyboard 


ahcccli1 [Running] - Oracle VM VirtualBox 


File Machine View Input Devices Help 
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Configure the keyboard 


Keymap to use: 


American English ^ 


Albanian 
Arabic 


Asturian 





Bangladesh 
Belarusian 

Bengali 

Belgian 

Bosnian 

Brazilian 

British English 
Bulgarian 

Bulgarian (phonetic layout) 
Burmese 

Canadian French 
Canadian Multilingual 
Catalan 

Chinese 
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Screenshot ^ GoBack | 
OG PS AGR SE) Right Ctrl 


Network Configuration 


Indian Version of GNU/Linux 





Configure the network 


Please enter the hostname for this system. 


The hostname is a single word that identifies your system to the network. If you don't know what your 
hostname should be, consult your network administrator. If you are setting up your own home network, 


you can make something up here. 


Hostname: 
ahcccli1 2| 





GoBack [continue | 


Screenshot 


setup Users and Passwords 





Set up users and passwords 


Select a username for the new account. Your first name is a reasonable choice. The username should 
start with a lower-case letter, which can be followed by any combination of numbers and more lower- 
case letters. 


Username for your account: 


| Screenshot Go Back | | Continue | 


Password 


Indian Version of GNU/Linux 





Set up users and passwords 


A valid password should contain a mixture of upper and lower case letters, numbers, punctuation 
characters and a minimum of 10 character long. Example: ZXCV(78)bn , QWERty!@3456 

A password will be accepted as a valid one, only if it satisfies all the above conditions. The user will be 
prompted for a password until you enter a valid password. 

Choose a password for the new user: 
PTTTTITTIT] | 


Please enter the same user password again to verify you have typed it correctly. 
Re-enter password to verify: 


Screenshot Go Back | 


LVM Configuration 


Índian Version of GNU/Linux 





Partition disks 


ITTTTTT Erasing data on SCSI1 (0,0,0), partition #5 (sda) | 


The installer is now overwriting SCS/1 (0,0,0), partition #5 (sda) with random data to prevent meta-inforn 


| Cancel | 


Encryption Passphrase 


s Indian Version of GNU/Linux 





Partition disks 


You need to choose a passphrase to encrypt SCSI1 (0,0,0), partition #5 (sda). 


The overall strength of the encryption depends strongly on this passphrase, so you should take care to 
choose a passphrase that is not easy to guess. It should not be a word or sentence found in 
dictionaries, or a phrase that could be easily associated with you. 


A good passphrase will contain a mixture of letters, numbers and punctuation. Passphrases are 
recommended to have a length of 20 or more characters. 
Encryption passphrase: 


Lo ————— 


Please enter the same passphrase again to verify that you have typed it correctly. 
Re-enter passphrase to verify: 





Screenshot | Go Back | Continue | 


Grub Installation 





device. The usual way to do this is to install GRUB on the master boot record of your first hard drive. If 
you prefer, you can install GRUB elsewhere on the drive, or to another drive, or evento a floppy. 






Device for boot loader installation: 
| Enter device manually | 


/dev/sda (ata-VBOX HARDDISK VB20c536aa-3aef81f7) 








| Screenshot | | Go Back | 


Finish Installation 
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Rharat aS ae 
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Finish the installation 


installation complete 
f) Installation is complete, so it is time to boot into your new system. Make sure to remove the 


installation media (CD-ROM, floppies), so that you boot into the new system rather than 
restarting the installation. 


Screenshot Go Back | 


Client Configuration 


Ahcc1 [Running] - Oracle VM VirtualBox - + X 


N O rm al U Se rn a m e a n d File Machine View Input Devices Help 


k Enter User Details. 


Password ve. 
Configuration 





y (53) A Right Ctrl 


Grub Security Configuration 


Ahcc1 [Running] - Oracle VM VirtualBox 


Grub Username and 
Password oerte [b 
Configuration 


File Machine View Input Devices Help 
Enter a vaild À Rr 





I nly lower case alphabets 


> 
er > GAS G 98 Right Ctrl 


Client Registration Configuration 


Ahcc1 [Running] - Oracle VM VirtualBox - + X 


e Name of the 
Machine 

e Army Contact 
Number 

e OTP to be get 
from the regional 
Administrator 

e Select Correct 
Date 


File Machine View Input Devices Help 
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Network Management 


Network Manager 


Dynamic network control and configuration system that attempts to keep 
network devices and connections up and active when they are available. 


NetworkManager consists of 


- core daemon 


GNOME Notification Area applet that provides network status information 


graphical configuration tools that can create, edit and remove connections 
and interfaces 


NetworkManager can be used to configure the following types of connections: 
- Ethernet 


- wireless 

- mobile broadband 

- DSL 

- PPPoE (Point-to-Point over Ethernet) 


Network Manager 


e NetworkManager allows for 


the configuration of network aliases 
Static routes 

DNS information 

VPN connections 


as well as many connection-specific parameters 


The NetworkManager Daemon 


The NetworkManager daemon runs with root privileges and IS usually 
configured to start up at boot time. 


You can determine whether the NetworkManager daemon is running by 
entering this command as root: 


- service NetworkManager status 


Interacting with NetworkManager 


* [he applet has multiple states that serve as visual indicators for the type of 
connection you are currently using. 


DET 





Connecting to a Network 


e When you left-click on the applet icon, you are presented with: 


- a list of categorized networks you are currently connected to (such as Wired 
and Wireless); 


- alist of all Available Networks that NetworkManager has detected; 
- options for connecting to any configured Virtual Private Networks (VPNs); and, 


- options for connecting to hidden or new wireless networks. 


Connecting to a Network 


If you are connected to a network, its name is presented in bold typeface 
under its network type, such as Wired or Wireless. 


When many networks are available, such as wireless access points, the 
More networks expandable menu entry appears. 


Wired Network 


Wireless Networks 


Red Hat 

Red Hat Guest 
VOIP 

More networks 


VPN Connections 


Connect to Hidden Wireless Network... 
Create New Ad-Hoc Wireless Network... 





Wired Networking 


Connect to a wired (Ethernet) network 


To set up most wired network connections, all you need to do is plug in a network cable. 


The wired network icon (settings) is displayed on the top bar with three dots while the 
connection Is being established. 


The dots disappear when you are connected. 


If this does not happen, you should first of all make sure that your network cable is 
plugged in. 


One end of the cable should be plugged into the rectangular Ethernet (network) port on 
your computer, and the other end should be plugged into a switch, router, network wall 
socket or similar (depending on the network setup you have). 


Sometimes, a light beside the Ethernet port will indicate that it is plugged in and active. 


If you are still not connected, your network may not support automatic setup (DHCP). In 
this case you will have to configure it manually. 


Manually set network settings 


e To manually set your network settings: 


Open the Activities overview and start typing Settings. 
Click on Settings > Network 


In the left pane, select the network connection that you want to set up 
manually. If you plug in to the network with a cable, click Network. 
Otherwise click WI-FI. 


Make sure that your wireless card IS turned on or a network cable is 
plugged In. 


Click the button. 


e For a WI-FI connection, the settings button will be located next to the 
active network. 


Manually set network settings 


- Click on IPv4 or IPv6 in the left pane and change the Addresses to Manual. 
- Type in the IP Address and Gateway, as well as the appropriate Netmask. 


Details 
Security 
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IPv4 
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Manually set network settings 


In the DNS section, switch Automatic to OFF. Enter the IP address of a DNS 
server you want to use. Enter additional DNS server addresses using the + 
button. 


In the Routes section, switch Automatic to OFF. Enter the Address, Netmask, 
Gateway and Metric for a route you want to use. Enter additional routes 
using the + button. 


Click Apply. If you are not connected to the network, click the system status 
area on the top bar and connect. Test the network settings by trying to visit a 
website or look at shared files on the network, for example. 


Wireless Networking 


lf you have a wireless-enabled computer, you can connect to a wireless network that is 
within range to get access to the internet, view shared files on the network, and so on. 


- Open the system menu from the right side of the top bar. 
- Select Wi-Fi Not Connected. The Wi-Fi section of the menu will expand. 
- Click Select Network. 


- Click the name of the network you want, then click Connect. 


e If the name of the network IS not In the list, try clicking More to see if the network 
is further down the list. If you still do not see the network, you may be out of 
range, or the network might be hidden. 


- If the network Is protected by a password (encryption key), enter the password when 
prompted and click Connect. 


e If you do not know the key, It may be written on the underside of the wireless 
router or base station, or In Its instruction manual, or you may have to ask the 
person who administers the wireless network. 


Wireless Networking 


- The network icon will change appearance as the computer attempts to 
connect to the network. 


- Ifthe connection is successful, the icon will change to a dot with several 
curved bars above it. More bars indicate a stronger connection to the 
network. Fewer bars mean the connection is weaker and might not be 
very reliable. 


e |f the connection is not successful, you may be asked for your password 
again or it might Just tell you that the connection has been disconnected. 


Connect to a hidden wireless network 


It is possible to set up a wireless network so that It is “hidden.” 


Hidden networks won't show up in the list of wireless networks displayed in the 
Network settings. 


To connect to a hidden wireless network: 

- Open the system menu from the right side of the top bar. 

- Select Wi-Fi Not Connected. The Wi-Fi section of the menu will expand. 
- Click Wi-Fi Settings. 

- Click the Connect to Hidden Network... button. 


- |n the window that appears, select a previously-connected hidden network 
using the Connection drop-down list, or New for a new one. 


- For a new connection, type the network name and choose the type of 
wireless security from the Wi-Fi security drop-down list. 


- Enter the password or other security details. 


- Click Connect. 


Connect to mobile broadband 


* You can set up a connection to a cellular (3G) network with your computer's 
built-in 3G modem, your mobile phone, or an Internet stick. 


- |f you do not have a built-in 3G modem, connect your phone or Internet 
stick to a USB port on your computer. 


- Open the system menu from the right side of the top bar. 


- Select Mobile Broadband Off. The Mobile Broadband section of the 
menu will expand. 


If Mobile Broadband does not appear in the system status menu, ensure 
that your device Is not set to connect as Mass Storage. 


- Select Connect. If you are connecting for the first time, Set up a Mobile 
Broadband Connection wizard is launched. The opening screen displays 
a list of required information. Click Next. 


Connect to mobile broadband 


- Choose your provider’s country or region from the list. Click Next. 
- Choose your provider from the list. Click Next. 


- Select a plan according to the type of device you are connecting. This 
Will determine the Access Point Name. Click Next. 


- Confirm the settings you have selected by clicking Apply. The wizard will 
close and the Network panel will display the properties of your 
connection. 


Some phones have a setting called USB tethering that requires no setup on the 
computer. When the setting Is activated on the phone, the connection will show 
up as Ethernet Connected in the system menu and USB ethernet in the network 
panel. 


Networking terms & tips 


Find your internal (network) IP address 
e Open the Activities overview and start typing Network. 
e Click on Network to open the panel. 
e Choose which connection, Wi-Fi or Wired, from the left pane. 
- The IP address for a wired connection will be displayed on the right. 


- Click the settings button to see the IP address for the wireless network in 
the Details panel. 


Find your external (internet) IP address 
e Visit whatismyipaddress.com. 


* The site will display your external IP address for you. 


Networking terms & tips 


* Define proxy settings 
- Open the Activities overview and start typing Network. 
- Click on Network to open the panel. 


- Select Network proxy from the list on the left. 


€ Network 


Ci Wired zb. Proxy 


# Network proxy 
Method | None 





Networking terms & tips 


e Choose which proxy method you want to use from: 
- None 


The applications will use a direct connection to fetch the content from the 
web. 


- Manual 


For each proxied protocol, define the address of a proxy and port for the 
protocols. The protocols are HTTP, HTTPS, FTP and SOCKS. 


- Automatic 


A URL pointing to a resource, which contains the appropriate configuration 
for your system. 


Applications that use the network connection will use your specified proxy settings. 


Configuration utilities 


ping 
* a computer network administration utility used to test the reachability of a host on 
an Internet Protocol (IP) network. 


e |t measure the roundtrip time for messages. 
Eg: ping 192.168.31.204 
PING 192.168.31.204 (192.168.31.204) 56(84) bytes of data. 
64 bytes from 192.168.31.204: icmp _seq=1 ttl=63 time=0.984 ms 
64 bytes from 192.168.31.204: icmp seq=2 ttl=63 time=0.393 ms 
64 bytes from 192.168.31.204: icmp _seq=3 ttl=63 time=0.493 ms 
192.168.31.204 ping statistics 


3 packets transmitted, 3 received, 0% packet loss, time 1998ms 


Configuration utilities 


traceroute - traces the route taken by packets over an IPV4/IPV6 network 
Eg: traceroute google.com 
mii-tool 


e Akey tool which reports the link status of all Ethernet devices on a system 
and its speed. 


mil-tool 
ethO: negotiated 100baseTxFD, link ok 
route - Show / manipulate the IP routing table. 


netstat - displays network connections, routing tables and number of network 
Interface statistics. 


Used for finding problems in the network and to determine the amount of traffic 
on the network as a performance measurement. 


Interface configuration file 


/etc/resolv.conf resolver configuration file 
Tell where to find the name servers. 

# Generated by NetworkManager 

search chennal.cdac.in 

Nameserver 10.184.0.11 


The search key specifies the string which will be appended to an incomplete 
hostname. 


The nameserver will be used to resolve a given IP address or hostname. 


/etc/hosts 


Interface configuration file 


This file is a simple text file that associates IP addresses with hostnames, one line per IP 


address. 


IP address canonical hostname [aliases...]| 


File contains IP addresses and their corresponding hostnames. 


When your system tries to resolve a hostname to an IP address it refers to the /etc/hosts file 
before using the name servers. 


IPAddress 
127.0.0.1 
208.164.186.1 
208.164.186.2 
208.164.186.3 


Hostname 
localhost 

deep.openna.com 
mail.openna.com 


web.openna.com 


Alias 
deep.openna.com 
deep 

mail 


web 


PRINTER MANAGEMENT 


Software Installation 


Check Cups Package 
# dpkg -I cups 
If not installed then run..... 
# apt-get install cups 
Check all the printer Drivers are installed 
# dpkg -! printer-driver* 
# dpkg -| foomatic-db-engine 


# dpkg -I hp-ppd 
# dpkg -! openprinting-ppds 


Adding a Printer 


CUPS has a web interface for setting up a print queue and administering printers. 


Three Sections while detecting the printer-driver 
1. Local Printers 


-printers which are usually attached to the machine you are using( can be a 
serial port or parallel port printers ). 


2. Discovered on Local Network Printers 
-printers which have been discovered on the local network. 
3. Other Network Printers 


-requires you to specify the destination for the remote print queue/printer. 


Screen shots of cups web Interface 





Applications + Places ~ Firefox Web Browser + Thu 27 Sep, 14:53 
Home - CUPS 1.7.5 - Mozilla Firefox = o x 
(S Home - CUPS 1.7.5 x c 
+ C ù G) løcalhost:631 - MD Vy + IN © = 
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SYSTEM 


CUPS is the standards-based, open source printing system developed by Apple Inc. for OS® X and other UN X*-like operating systems. 





CUPS for Users CUPS for Administrators CUPS for Developers 


Overview of CUPS Adding Printers and Classes Introduction to CUPS Programming 
Command-Line Printing and Options Managing Operation Policies GUPS API 
What's New in GUPS 1.7 Printer Accounting Basics Filter and Backend Programming 
User Forum Server Security HTTP and IPP APIs 
Using Kerberos Authentication PPD API 
Using Network Printers Raster API 
cupsd.conf Reference PPD Compiler Driver Information File Reference 


Developer Forum 
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Screen shots of cups web Interface 


Applications + Places ~ (Firefox Web Browser + 
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Administration - CUPS 1.7.5 - Mozilla Firefox 





c a X 
G Administration - CUPS t 
= C 0 (0 localhost:631/admin Y l ++ IN © = 
G Home Administration Classes Online Help Jobs Printers Search Help 
Printers Server 
Add Printer Find New Printers Manage Printers Edit Confiquration File View Access Log View Error Log View Page Log 
Server Settings: 
Classes i 
Advanced p 
Add Class Manage Classes Share printers connected to this system 
Allow printing from the Internet 
Jobs Allow remote øl ie 
Use Kerberos authentication (FAQ) 
Allow users to cancel any job (not just their own) 
Manage Jobs 


Save debugging information for troubleshooting 


Change Settings 


RSS Subscriptions 


Add RSS Subscription 
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Screen shots of cups web Interface 
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Add Printer 


Local Printers: Serial Port #1 
HP Printer (HPLIP) 
LPT #1 
HP Fax (HPLIP) 


Discovered Network Printers: HP Color LaserJet Pro MFP M477-color printer @ boss-10 (HP HP Color LaserJet MFP M477fdw) 
HP LaserJet M5035 MFP @ boss-10 (HP HP LaserJet M5025 MFP} 
old-printer-pillar @ boss-10 (Hewlett-Packard Hewlett-Packard HP LaserJet P4515) 
small printer @ boss-10 (HP HP LaserJet 400 M401dw) 
Other Network Printers: LPD/LPR Host or Printer 
Internet Printing Protocol (https) 


( 
Internet Printing Protocol (ipps) 
Internet Printing Protocol (http) 


Internet Printing Protocol (pp) 
AppSocket'HP JetDirect 
Internet Printing Protocol (ipp14) 
Windows Printer via SAMBA 


Continue 
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screen shots of cups we 
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Add Printer - CUPS 1.7.5 - Mozilla Firefox 


* Add Printer - CUPS 1.7.5 X | + 


c— X n Gi) localhost:63 1/admin 


G Home Administration Classes Online Help Jobs 


Add Printer 


Name: up up LaserJet 400 M401dw 
(May contain any printable characters except "/”, "4", and space) 
Description: up Hp LaserJet 400 M401dw 
(Human-readable description such as "HP LaserJet with Duplexer") 
Location: Samll Black Printer 
(Human-readable location such as "Lab 1") 
Connection: dnssd://small%20printer%20%40%20boss-10. ipp. teplocal/cups 
Sharing: Share This Printer 


Continue 


Waiting for localhost... 
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Screen shots of cups web Interface 
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Add Printer - CUPS 1.7.5 - Mozilla Firefox = n x 
& Add Printer - CUPS 1.7.5 X | (9 hp's Developer Portal |H X | + 
= C ù (D localhost:631/admin e QU OY + ND = 


Add Printer 


Name: HP HP LaserJet 400 M401dw 


Description: HP als crore ie ET Eu 


Location: Samll Black Printer 
Connection: dnssd'//small?e20printer?52095409520boss-10. Ipp. tcp.local/cups 
sharing: Do Not Share This Printer 


Make: | jp Select Another Make/Manufacturer 


Model: |r Caseret Fro MIFF MIZZS-NIZZ0 FOSTSCNPT recommended) (en) 
HP LaserJet Pro MFP M225-M226 Postscript (recommended) (en 
HP LaserJet Pro MFP M225-M226 Postscript 
HP LaserJet Pro MFP M225-M226 Postscript 
HP LaserJet Pro MFP M225-M226 Postscript 
HP LaserJet Pro MFP M225-M226 Postscript 


recommended) (en 


SS 'LE LA x 


recommended 


) 

) 

recommended) (en) 
) 

en) 

) 


HÅ 

) 
recommended) (en 

JÅ 

) ( 


HP LaserJet Pro MFP M225-M226 Postscript (recommended 
:HP LaserJet Pro MFP M435 Postscri 


en 





HP LaserJet Pro MFP M521 Postscript (recommended) (en) 
HP LaserJet Pro MFP M521 Postscript ie. (en) 


LIT | ssarlar Dres BAC RAC Gee te eee rara moms aod) fan’ 
Or Provide a PPD File: Browse... No file selected. 
Add Printer 
CUPS and the CUPS logo are trademarks of Apple Inc. Copyright 2007-2014 Apple Inc. All rights reserved. 
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Screen shots of cups web Interface 
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Set Printer Options - CUPS 1.7.5 - Mozilla Firefox = n x 
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Set Default Options for HP HP LaserJet 400 M401dw 
Query Printer for Default Options 


General Options Installed  Paper/Quality Banners Policies 


Port Monitor 
General 
Media Size: 44 v 
Paper Source: automatic v 
Two-Sided: of v 


Set Default Options 
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Screen shots of cups web Interface 


Firefox Web Browser + 


Applications + Places + Thu 27 Sep, 14:59 





Printers - CUPS 1.7.5 - Mozilla Firefox 
(S Printers - CUPS 1.7.5 X | (D hp's Developer Portal |H X + 


€ C 0 


(s Home 


(D localhost:63 1/printers/ 


Administration Classes Online Help 


Search in Printers: 


showing 5 of 5 printers. 


v Queue Name v Description Location 
big-printer-nearadmin HP LaserJet M5035 MFP @ boss-10 boss-10 
black-smallprinter small printer @ boss-10 boss-10 
HP -Color-LaserJet-Pro-MFP- HP Golor LaserJet Pro MFP M477-color printer @ 

| boss-10 
MAT boss-10 
HP-LaserJet-P4010 old-printer-pillar @ boss-10 boss-10 
HP HP LaserJet 400 M40idw HP HP LaserJet 400 M401dw ee 


CUPS and the CUPS logo are trademarks of Apple Inc. Copyright 2007-2014 Apple Inc. All rights reserved. 
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Alternative Configuration Methods 
and Utilities 


1. system-config-printer 

-native printer administration tool 
2. Hplip 

-tool which Is specifically for HP printers 
3. Ipadmin 

-command line tool to add printer 


Note: You should know exactly what the printer destination Is and what 
driver to use. 


system-config-printer 


BOSS GNU/Linux contains drivers for most of the Printers, just you have to 
configure the printer 


The procedure consist of 4 steps: 


Steps for Printer Configuration 
1. Go to Applications -> Sundry -> Printers Settings or Type 
In terminal “system-config-printer” 


2. Click on “Unlock” button and Enter the administrator 
password to unlock. Then Click the '+' or Click “Add New 
Printer” to add new printer. 


3. Select the the type of the printer. For Network printer enter 
the IP address, port no and click “Forward” 


4. Select the Printer Model and click “Forward” 


Screenshot for system-config-printer 


Applications + Places" M LibreOffice Writer * Wed 23 Sep 


Favorites y Print Settings 
Accessories 
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Activities Overview 





Screenshot for system-config-printer 


( Printers Bi Lock = X 


No printers available 


Ada New Printer 


Screenshot for system-config-printer 





New Printer M n » 
Select Device 
Devices Location of the network printer 
LPT #1 Host | 192.168.31.150 | 
Serial Port 3£1 —————————————J» 
Serial Port #2 Port number: | 9100 | 


Enter URI 
= Network Printer 
boss-? 
Find Network Printer 
Internet Printing Protocol (ip 
AppSocket/HP JetDirect 
Internet Printing Protocol (ip 


Internet Printing Protocol (h | 
+ Connection 


Internet Printing Protocol (ip 


LPD/LPR Host or Printer 


Connections 


AppSocket/HP JetDirect 


Windows Printer via SAMBA 





Cancel | Forward 


Screenshot for system-config-printer 


Choose Driver 


Models 


LaserJet p4014 
LaserJet p4014dn 
Laserjet p4014n 
LaserJet p4015 
LaserJet p4015dn 
LaserJet p4015n 
LaserJet p4015tn 
LaserJet p4015x 
LaserJet p4515 
LaserJet p4515n 
LaserJet p4515tn 
LaserJet p4515x 


LaserJet p4515xm 


LaserJet Plus 


Laserlet Pro MFP m1l125a 





Hew Printer E n 


Drivers 


HP LaserJet p4015, hpcups 3.15.6 [er 
HP LaserJet p4015 hpijs, 3.15.6 [en] 


Back | Cancel | Forward 


Screenshot for system-config-printer 


Mew Printer = n x 


Installable Options 


This driver supports additional hardware that may be installed in the printer. 


Duplexer Installed 


Back Cancel Forward 


Screenshot for system-config-printer 
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Connected to localhost 


EXTERNAL DRIVERS 


Installing Printer drivers externally if not available in BOSS GNU/Linux 


Download the PPD files from the below website 
http://www.|inuxprinting.org/printer_list.cg| 


Here you select the printer company and the model from the select box and 
click on "Show". 


This will follow up a page where you need to search for the Recommended 
Drivers line and click on“Custom PPD” or “Download PPD” [Differs based on 
printer]. 


Save this PPD file in your system. 


EXTERNAL DRIVERS 


Now Select the Printing option from System —> Administration — Printing. In 
the Step 2 of configuration click on “Provide PPD File”. Then click on the 
open folder select the saved PPD file. This installs your printer divers into 


your system. 


Screeshot for PPD 


New Printer - n 


Choose Driver 
select printer from database 
a) Provide PPD file 


Search for å printer driver to download 


PostScript Printer Description (PPD) files can often be found on the driver disk that 


comes with the printer. For PostScript printers they are often part of the Windows" 
driver. 


(None) D» 


Back Cancal 


HP Printer setup 


Using “hp-setup” utility 
Open the command prompt and run the following command 
sudo hp-setup -! (if printer is connected locally) 
or 


sudo hp-setup -i <ip_address> (if printer Is connected via network) 


Canon Printer Setup 


Step 1: Download and install the drivers 


Download the drivers cndrvcups-capt_2.60-1_1386.deb cndrvcups- 
common 2.60-1 1386.deb 


Open terminal and Install the packages 


sudo dpkg -Ii cndrvcups-common_2.60-1_1386.deb cndrvcups- 
capt_2.60-1_1386.deb 


Step 2: Install other postscript fonts & program to reserve ports for the printer 
Install portreserve, gsfonts, gsfonts-other, gsfonts-X11 


sudo dpkg -i postreserve gsfonts gsfonts-x11 gsfonts-other 


Canon Printer Setup 


Step 3: Restart the printer 
sudo /etc/init.d/cups restart 
Step 4: Add printer and start the Cannon Printer daemon. 


sudo /usr/sbin/lpadmin -p LBP7200C -m 
CNCUPSLBP7200CCAPTK.ppd -v ccp://localhost:59787 -E 


sudo /usr/sbin/ccpdadmin -p LBP7200C -o /dev/usb/lpO 
sudo /etc/init.d/cups restart 


sudo /etc/init.d/cups status 


Canon Printer Setup 


Step 5: Check the printer status 
captstatusul -P LBP7200C 


If you are seeing the message "Ready to print", you are done!. Else you may 
have to restart the system, and repeat all the steps from step 4. 


Step 6: Start the printer service for every system startup 
sudo gedit /etc/rc.local 

Add 
/etc/init.d/ccpd start 


before the word “exit” , save the file and close 


Samsung printer Setup 


Samsung printers need Unified Printer drivers from http://www.bchemnet.com/suldr/ . 


To install that , open terminal and run 
sudo gedlit /etc/apt/sources.list 


Now along with the existing repository links, add 
deb http://www.bchemnet.com/suldr/ debian extra 


Save the file and close. In terminal run 
sudo wget -O - http://www.bchemnet.com/suldr/suldr.gpg | sudo apt-key add - 
sudo apt-get update 
sudo apt-get install suld-driver-4.01.17 


This will install the necessary packages for Samsung printers. Once it is installed 
fully, configure the printer using Printer wizard. 


ISOC Server 


ISOC Server is the centralized administrative web 


application to monitor and configure all civilnet client 
machines and users. 


Components of ISOC Server 

? Dash Board 

? Client Management 

> Log Viewer 

> Local Administrator Management 
> Policy Configuration 


ISOC Dashboard 


e Summarized Status about client machines 
* Client Anti virus & Patch update status 

* Clients Registration status 

* Information about violation done by client 


ISOC Dashboard 


(» Logout & Change Password 




















ISOC $ Dashboard 
Logging Rule Clamav Patch 
7] Received 0% Pushed 0% of Clients 33% Glients Updated 33% of Clients 
summary - x 
User Violation © Unapproved Clients 
dá O Approved Clients 
30 
20 
10 
PORT TRIPWIRE URL USB SYSTEM HARDWARE 
Total Clients 733 


Approved Clients 636 


Client Management 


Army BOSS civilnet clients are should register with ISOC server 


New civilnet client computer registered with ISOC using unique 
identification number as One Time Password (OTP) 


OTP must be generated by unit's ISOC administrator only 


OTP is 9 digit unique identification number to authentic client with server 
while registration 


system Admin / System Engineer should get OTP from concern unit 
administrator before starting registration 


Caller name is user name,who requesting OTP to register client machine. 


Clients Log ,Clamav,Rule /Policy and patch update status could be 
monitored by unit administrator 


Generation of OTP 


ü 
3Daysk —Logout &. Change Password 


InternetSOC 


X sampleadmin2 ISOC & Dashboard 


Online 





Generating OTP 


Log Search 
Generate OTP 





® Local Administration 


la Server Tree 


L4 Add and Edit Group 


da Client Status 


Clients 


Log Viewer 


Dalete Units 
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Generation of OTP 
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1 Your OTP is:6395-77192 
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EL 
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Client Deletion 


* Only AHCC Super Administrator is responsible to 
delete unit / client from ISOC server 


* If Client deleted by super admin can not be 
monitor by Unit admin also 
* Policy configuration 


Super Admin user only have privilege to send 
configuration of policy to all / unit's clients 


Super Administrator only can block website / service / 
Install new application 


Monitoring Clients 


e ISOC server Application having following features 
to monitor client 
- Clients 
* To view registration status of client 
- Log Viewer 
* To view log entries of client machine / user activities 
* Get Alert Notification to view user violations 
- Hierarchy 
* To monitor sub units and client update status 
- Alerts 


* To monitor what kind of violation happened in client 
machine 


Client Registration Status 


Click on Clients menu option in side menu bar 


3 
3 Days Ñ ($ Logout &. Change Password 





e ISOC $$ Dashboard 


p 


Registered Clients 


un 


e Show 10 | entries Search: 

i Client Name Status ~ 

a AHCC-clientmachineonenew Approved i 

ar AHCC-NC-Leh-chamy2 Approved i 

T AHCC-NC-ahccncclil Approved i 

E AHCC-NC-ncclient Approved i 

DN Showing 1 to 4 of 4 entries Previous Next 


IN 
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LOG VIEWER 


* Log Viewer to monitor user activities on client machine 


* |SOC Server having Two kind of Log viewer 
- Log Viewer to view clients log by month wise 


- Log Search to view client logs by key word searching within 
period of date 


- Various type of logs collected from clients are System Usage 
Violation,File integrity check,File System Status,USB device 
usage, USB Violation, Browser Log, URL Violation, System 
Upgrade, Last Login, Bad Login Attempts, Antivirus 
Log,Halt/Reboot Log, Upgrade to Super User ,Service/ 
Port,etc.. 


Log Viewer 


3 Days A [* Logout @ Change Password 























X ISOC B Dashboard 
å Log Viewer Client Details 
= 
Units sam pleunit2 4 Client id : WD-WCAWF8205205- 
m 5an-123-339-20180918180600530 
[| 
User Group Local Group m 
" hardisk serial : WD-WCAWF8205205 
Select Client HQ-sampleunit2-santosh Username: santosh 
Ej 
contact: 12345 
Fa 
ndi Installed time: 2018-09-18 19:16:30+5:30 
a Select Month sep v 
Macid: 70:71:bc:a4:9f:bc 
y Log Type Browser Logs 4 
Approved Time : 2018-10-03 13:30:00 


0000 
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Log Viewer 











a 
LA — 3 Days à fk Logout &. Change Passwor 
a ISOC d» Dashboard HB ba: 
Log viewer - Client : santosh Log : browser 

le 
= System Upgrade Log File Integrity check Hardware change Last login logs Bad login Attempts Antivirus log Tripwire Full Report Port/Service Violation 
EOS ay 
zx | Print | 
d Show 10 M entries 
Ej 6 

SL.No lÈ Client Name Logs 
Eit 0 santosh 09/18/2018 18:06:39 adservice.google.com 
ih 1 santosh 09/18/2018 18:06:39 apis.google.com 
2 santosh 09/18/2018 18:06:39 aus5.mozilla.org 

3 santosh 09/18/2018 18:06:39 location.services.mozilla.com 
Ü 

4 santosh 09/18/2018 18:06:39 ocsp.digicert.com 
A 5 santosh 09/18/2018 18:06:39 ocsp.pki.goog 
= 5 santosh 09/18/2018 18:06:39 safebrowsing-cache.google.com 

T santosh 08/18/2018 18:06:39 safebrowsing.google.com 

8 santosh 09/18/2018 18:06:39 search.services.mozilla.com 

9 santosh 09/18/2018 18:06:39 self-repair.mozilla.org 


Showing 1to 10 of 26 entries Previous 2 3 Next 


Log Search 


* Unit Admin also can view log by searching 
particular type of log using search keyword 


* [his is advanced feature to view log between 
two date 


* Log Search can be performed upto previous 
date of searching 


* Log search must need Search string and Unit 
have to be search log entries. 


Log Search 


E Days À ( Logout @ Change Password 





o ISOC $ Dashboard 








R 


Log Search "Mandatory Search keys 


Search Key * filled 1 96 XsCreensaver 

www.mouthshut.com 

Select Date Range 2018-07-04 2018-10-03 UDF: he 

- bossas.cdacchn.in 
led 1 


Ez coe 
a 


Units sampleunit2 


ES Lt 


LogType Filesystem Status 


R 





« 
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UL 


Log Search 








a 
A = 3Days dá Logout % Change Password 
S ISOC Se Dashboard ^ d Back 
x 


Log Search Result - filled 1 96 


= 
i E CSV | Print ‘Show 10 v entries 
de 

Client Name Unit Name Message Log Type 

santosh 1 sampleunit2 09/18/2018 The /home file system filled 1 96 Filesystem Status 
a santosh i sampleunit2 09/18/2018 The /usr file system filled 45 % Filesystem Status 

p y y 

Fa santosh i sampleunit2 09/18/2018 The /var file system filled 5 % Filesystem Status 
a santosh i sampleunit2 09/18/2018 The / file system filled 18 % Filesystem Status 
y Showing 1 to 4 of 4 entries 
E Page | lv of 
A 
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cite 


Hierarchy 


* To monitor client update status for sub-units 


* To get statistics about how many clients 
updated with Anti-virus,Policies ,Patch updates 
and sending logs 


* Unit Admin can view status only their sub-units 
only 


* AHCC Super Admin only can view statics for All 
Units as graph 


Hierarchy Graph for Unit Admin / 
Sub-Units 
e Login as admin user then click “Hierarchy” menu option 
In side bar 


ISOC 


Graph 

















Alerts on Violations 


e System in on state after Office hours 
* USB Mass storage device usage 
* Accessing blocked websites / URL 


* Accessing non-privileged application files / unauthorized file 
system access 


* Violation alerts notified if only log is registered in client and 
received by server 


* Alerts are notified from last 3 days processed log entries 


Local Administration Management 


¢ To Create new sub-unit / hierarchy based unit 
administrator user creation 


* Unit admin can delete existing local administrators 


* Unit Administrator can also reset / change 
password for sub-unit admin / Local Administrators 


* AHCC Super Admin only can delete Units / Sub- 
Units / Client if not required 


Creating Local / New Sub-Unit 
Administrator 


* Click Local Administration Menu 


InternetSOC = 3 Days À Œ Logout  & Change Password 


t sampleadmin | SOC de Dashboard 
Online 






Local Admins 
CASA OTP 
List Of Members 
sampleadmin2 | 


y Local Administration 


la" Server Tree Øaddadmin | QdeleteAdmin | Q Reset Password 


Note : Click Add Admin to add new local administrator 





4. Add and Edit Group 


Adding New Local Administrator 


* Click on Add Admin button 
* Enter value for User name,Password,email,choose unit name 
* Add new unit to create new unit,otherwise choose existing unit 


3 Days Å (* Logout & Change Password 




















E ISOC & Dashboard 
EMÉ ^ Adding Admin 
- 
g Username ladminl | 
E] 

Password ce | 

Email ladminl&gahccmil | 

ra 
ra 
E 
, 


UL 
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Removing Local Administrator 


: Select local administrator name 
' Click on Remove Admin 


3 Days Øk l Logout &. Change Password 





ISOC & Dashboard 


Local Admins 


List Of Members 


sampleadmin4 ~ 


© Add Admin © Delete Admin © Reset Password 


Note: Click Add Admin to add new local administrator 
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Change password for local 
Administrator 


e Select Local Administrator name from list of members 
then click Reset Password button 


* Enter new password then click Change Password button 


ISOC & Dashboarc 


Change Password for sampleadmin3 


New Password 








Package Management 









e 





in 


A package management system (or PMS) is a 


w H 


X 


collection of tools to automate the process of 
installing, upgrading, configuring, and removing 


software packages from a computer. 


Distributions of Linux typically consist of hundreds 


oftwa 





or even thousands of distinct s re packages 





therefore managing the packages is very much 


essential. 


WWW.DOSSIINU 


"O DE Package management tools 


| ating Er 





e dpkg 
e apt-get 
e gdebi 


e Synaptic manager — 














dpkg 


dpkg is Debian Package Manager 

The most common use of dpkg is to install a local .deb file. 

To install a .deb file, become root and use the command: 
dpkg -i «filename.deb » 

Dpkg can also be used to: 

dpkg -| : lists the installed packages 

dpkg -S : Search which package owns a file 


dpkg --configure : presents whatever configuration options 
are available for the package 





dpkg --remove  : removes a package 














Usage of apt-get 


Ways to use aptget 


To update the packages list, 


Apt-get update 


To install a package (ex: gdm), 


To remove a package (ex: gdm) from your system 


To remove the package and also its configuration 


Apt-get install gdm 


Apt-get remove gdm 


files from your system 





Apt- g BE > purge rem ove g am 
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e To upgrade all the packages which is installed in 


your system. 
e Apt-get upgrade 


e To upgrade all the packages on your system, and, if 
needed for a package upgrade, installing extra 


packages or removing packages 


e Apt-get dist-upgrade 


b = == — 

E 

vi 
hi — — El 
E i a 
B 
ta. | " 

ty ie 
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"ed 


DU How to work with apt-get? ¿22 





» Open vi /etc/apt/sources.list and add the following repositories in it. 


4 


e deb http://packages.bosslinux.in/boss anoop main contrib ~ 
Du å 


ES ai 
non | ree d 
Fe. 


= § 


- 
— 


e  Deb-src http://packages.bosslinux.in/boss anoop main = 





contib nonfree ES 
Y 
Run aptget update command from the prompt if) 





This command looks for the packages list available in the archives ~ 





and savesitin /var/lib/apt/lists. 





When we install a package, apt Will search for status and path of > 





the package in package lists file 





Usage apt-cache 


e To find packages whose description contain word 
e| apt-cache search word 
e To view the detailed information of a package 
e  apt-cache show <packagename> 
e apt-cache commands: 
e  apt-cache show 
e apt-cache depends 


e  apt-cache search 











gdebi 


Simple tool to install deb files - GNOME GUI 


gdebi lets you install local deb packages resolving 


and installing its dependencies, only If the system Is 


connected to the Internet. 


apt does the same, but only for remote (http, ftp) 


located packages. 
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gdebi 


Simple tool to install deb files - GNOME GUI 


gdebi lets you install local deb packages resolving 


and installing its dependencies, only If the system Is 


connected to the Internet. 


apt does the same, but only for remote (http, ftp) 


located packages. 
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Installation of rom and exe 





I 


e Installing rom packages 





e Rpm packages can be installed using a tool called 
alien. 


e Alien -i <rom package name> 
e Alien -d <rom package name> 
e Installing exe files 


e Exe packages can be installed using a tool called 
wine. 





e Wine <name of the exe file 


E | 
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Tar.gz or zip files installation 


ET 


e Right click on the corresponding file and choose “extract 


r 
n 


here " option 
e Follow the instructions in README file or install file 
e Mostly the steps will be 


e /configure 





e make 


© make install 
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LIBREOFFICE 





BASE DRAW FORMULA 


Writer A word processor with similar functionality and file support to Microsoft Word or 
WordPerfect. It has extensive WYSIWYG word processing capabilities, but can 
also be used as a basic text editor. 


Calc A spreadsheet program, similar to Microsoft Excel or Lotus 1-2-3. It has a 
number of unique features, including a system which automatically defines series 
of graphs, based on information available to the user. 


Impress A presentation program resembling Microsoft PowerPoint. Presentations can be 
exported as SWF files, allowing them to be viewed on any computer with Adobe 
Flash Player installed. 


Draw A vector graphics editor and diagramming tool similar to Microsoft Visio and 
comparable in features to early versions of CorelDRAW. 


Math An application designed for creating and editing mathematical formulae. The 
application uses a variant of XML for creating formulas, as defined in the 
OpenDocument specification. 


Base A database management program, similar to Microsoft Access. LibreOffice Base 
allows for the creation and management of databases as well as the preparation 
of forms and reports that provide end users easy access to data. 
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Applications ¥ Places y 
K3b - The CD and DVD Kreator = o x 


File Project Device Tools Settings Help 
| 9 New Project v L3 Open bal Save | “ew Format | ce > Home > tmp 








No medium present 
ES rssTcorp - CDDVDW SH-224DB 


o B Home 

+  boss-dont-delete 

+ ES] Desktop 

+» E Documents 

+ E Downloads 

* ES ISOC-LOGS-DO-NOT-DELETE 
* BS Music 

+ ES Pictures 

+) ES) Public 


* BS Templates 
+) ES Videos 
+ Root 

















Welcome to K3b - The CD and DVD Kreator 









ar 
a 
n 
"T 
K3b 2.0.2 © 1999-2010 Sebastian Trüg et a 


Z [AHCC-trainnig-shedule.pdf] | a [boss-training] | E! [client1 boss: ^] | Gj K3b The CD and DVD Kreator — 


K3b is a full-featured, easy to use CD and DVD burner, copier, ripper and more. 





emp: 335.0 MiB/360.0 MIB K3b 2.0.2 
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Features 

e Burn and Copy CDs and DVDs 

e Rip and Create audio CDs 

e Rip DVDs 

e Create mixed CDs (audio + data) 
e Create video CDs 


UMD INSTALL GUIDE for BOSS 


1. Open your ADMIN account. 


2. Go to web address : https://www.allmapsoft.com/umd/download.html 




















Applications ¥ . Firefox Web Browser v Thu 2 Aug, 15:35 
Download - Mozilla Firefox = O x Di 
File Edit View History Bookmarks Tools Help 
Download x \ + 
€)Oa | https://www allmapsoft.com/umd/download. html | ec | Q Search | A $+ À = 


Home 


Download Our software is available to download in EXE formats, just run the file would guide you through the following setup process. 


Bu : | : : 
— 3 Available Versions Size 3 Download Link 


How to use 
Universal Maps Downloader 9.49 
E (English version) 8.58 MB download 


Contact us 
Opening umd setup.exe 


You have chosen to open: 
., umd-setup.exe 
which is: DOS/Windows executable (8.6 MB) 
Copyright 2013-2018 by allmapsoft.com. All righ from: https://www.allmapsoft.com 
What should Firefox do with this file? 
| € Open with 

+DownThemAll! 
*) Save File 


| Do this automatically for files like this from now on. 


Cancel 





3.Open terminal to install wine: 
# sudo apt-get install wine 


Applications ¥ Terminal y Thu 2 Aug, 15:55 





client1 @boss: ~ - o x 


File Edit View Search Terminal Help 


root@boss[~]#apt-get install wine 
Reading package lists... Done 
Building dependency tree 
Reading state information... Done 
The following extra packages will be installed: 
libwine libwine-gecko-2.21 wine32 
Suggested packages: 
binfmt-support ttf-mscorefonts-installer winbind 
The following NEW packages will be installed: 
libwine libwine-gecko-2.21 wine wine32 
O upgraded, 4 newly installed, O to remove and O not upgraded. 
2 not fully installed or removed. 
Need to get 57.6 MB of archives. 
After this operation, 159 MB of additional disk space will be used. 
Do you want to continue? [Y/n] vi 


4. Install GUI for Wine: 
#sudo apt-get install q4wine 


Applications ¥ “> TE ia Thu 2 Aug, 15:43 





client1 @boss: ~ = o x 


File Edit View Search Terminal Help 


root@boss[~]#apt-get install q4wine 
Reading package lists... Done 
Building dependency tree 
Reading state information... Done 
The following extra packages will be installed: 
icoutils Libqt4-sql-sqlite 
Suggested packages: 
libqt4-dev fuseiso 
The following NEW packages will be installed: 
icoutils libqt4-sql-sqlite g4wine 
O upgraded, 3 newly installed, O to remove and O not upgraded. 
2 not fully installed or removed. 
Need to get 1,403 kB of archives. 
After this operation, 4,987 kB of additional disk space will be used. 
Do you want to continue? [Y/n] 


5. go to Applications —------ > System Tools —--- > q4wine , a First time Setup wizard appear, click 
“NEXT” to proceed as shown 


NOTE : if error dialog comes like this , click “OK”: 


Applications ¥ Q4Wine v 7 Thu 2 Aug, 16:09 en Y aM MOM. 
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Error 


install..2.png 


quotation 


Error while loading application settings. wine's library path for 
32 and 64 bit is not set. 


|I Hl 
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M LTSP.THIN- 


CLIENT.zip Please, go to the q4wine options dialog and set at least one 
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Step 3 of 8 








Default Wine paths: 


wine bin: fusr/bin/wine 







wine server: [usr/lib/i386-linux-gnu/wine/bin/wineserver 





wine loader: fusr/bin/wine 





riding wine libs (32bit): /usr/lib/i386-linux-gnu 
MEREEN. <LIENT.zIp 






0006060 


wine libs (64bit): 
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nome 
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— Ó— > ta. di E 
First startup wizard 







Er 8 


øke 





| First startup wizrad Step 4 of 8 











System utils paths: 











tar: /bin/tar G 
\ i mount: /bin/mount e 
umount: /bin/umount e 
LTSP-THIN- sudo: fusr/bin/sudo e 
CLIENT.zip 
gui sudo: /usr/bin/gksudo o 
nice: fusr/bin/nice o 
od renice: /usr/bin/renice ce 
| à lo] | sh: [bin/sh o 
: Eod — Presertationr 
de | j quotation Je: — 
ui 550 end e = 
LAII Help < Back Next> Cancel ~ 
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[Ar Aa) First startup wizard 
es : 


| First startup wizrad Step 5 of 8 


Console application settings: 











Binary: /usr/bin/xterm o 
| Y Arguments: -e 
media-gfx/icoutils settings: 
LTSP_THIN- wrestool: /usr/bin/wrestool o 
SENTI. icotool: /usr/bin/icotool o 
tr "| | 
| Le | len | Presentation) 
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eg Aa) First startup wizard 
es a 


| First startup wizrad Step 6 of 8 


Network settings 











Proxy type: No Proxy v 
| "m Host: 
Port: 
LTSP-THIN- Username: 
CLIENT.zip 
Password: 
v j 
å Lei = | Presentation 
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fme n , = 
deskiop22 First startup wizard 
Le : 
| First startup wizrad Step 7 of 8 


Select Quick Mount Profile 
The quick mount features allows you to mount umount CD images and 


drivers with a context menu entry. 


Profiles: 
sudo v 
LTSP_THIN= Profile Strings: 
AT  CLIENT:zip Mount: 


Mount image: 








Umount: 
» | j 
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| First startup wizrad Step 8 of 8 


All ready for finishing Q4Wine setup. 


Please, press the Finish button to create finish setup process. Or press Back 
n button for return. 
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5. select exe downloaded for setup, and Right click to choose “Open with” q4wine 
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Cut Other Application... 
oe © Recent 
des "er i ] Copy i 
(2 Home current maiti AUDI ARMAAN 
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i Mee MS.Browser. MS.Browser. mehr Make Link download 
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if error dialog comes like this , click “OK”: 
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Error 


Error while loading application settings. wine's library path for 
. 32 and 64 bit is not set. 







LTSP-THIN- 


SERT. Please, go to the q4wine options dialog and set at least one 






path. 
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6. This windows comes after clicking OK , proceed by clicking OK. 
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Steps to allow particular URL which is other wise blocked by 
policy in ISOC (BOSS) PCs 


NOTE : Only allow the websites you have permission to use as all the websites usage report will be 
available to ISOC portal, so if you are allowing any other blocked websites which you don't have 
permission to use then it will be treated as a violation. 


All the below commands you have to run as a admin user 


1. First open the file allowedurls.txt by double clicking it and then type the websites you wants to 
allow. Don't type http, www, or .com. For e.g if you want to allow https://www.facebook.com 
then just type facebook, don't type any thing else. 

2. Nowruncommand: sudo apt-get update 

sudo apt-get install incron inotify-tools 
Once installation is completed. 

3. Run command : sudo gedit /etc/incron.allow 
and type 
root 
then save and close the file. 

4. Now run command : sudo incrontab -e 
and type 
while [ 1 ]; do inotifywait -e modify /etc/hosts; sh /opt/manage-etc-hosts.sh; done 
in a single line. then save and exit the file by pressing “Cntl+x” and then “y”. 

5. Copy the file manage-etc-hosts.sh to /opt/ folder 
Run command : sudo cp <drag and drop manage-etc-hosts.sh> /opt/ 

6. Copy file allowedurls.txt to /opt/ folder 
Run Command: sudo cp <drag and drop allowedurls.txt> /opt/ 

7. Run command : sudo chmod +x /opt/manage-etc-hosts.sh 

8. Run command: sudo /opt/manage-etc-hosts.sh 

9. Run command : sudo init 6 
Your PC will restart after this and the blocked website which you have permission to use will 


start working. 


E-token 


1. List of currently supported devices: 





1 
2 
3, 
4 


2. 


Aladdin 
Epass2003 
Gemalto 
Moserbaer 


Trustkey 


2. Check etoken driver package > dpkg -l etoken-eprocure 


Package name: etoken-eprocure 


Version : 2.5 


Architecture : 1386 (client machines) 


E-token 


e To check if the etoken is detected and necessary 
driver is loaded or not: 


cat /etc/etoken.conf - lists the E-token device 
connected currently 


/usr/lib/pkcs11/ - contains linux driver for all supported 
E-token devices 





E-token 


To check the working of etoken in BOSS OS 


— Open Firefox Goto 
Preferences>Advanced>Certificates>Security 
Devices 


— Click load to add module name and the 
location of the driver. 


— Log In to the etoken by using the etoken 
password. 


Troubleshooting BOSS 





Hardware Issues 


e Often involve improper hardware or software configuration 
e Obsolete hardware 
e Improper video card and monitor configuration 
e Corrupted harddisk 
e Less RAM / memory 


e Missing device drivers 








e Quick fixes: 
e Check hardware cables , indicator lights and power 


e Replace devices 





Software issues 
e Often involve improper system / user settings 
* Missing program libraries/files 
e Process / permissions restrictions 
* conflicting applications 


* Missing dependencies , prerequisite shared libraries 
or packages required for program execution 


e Package files may be removed accidentally 





: Quick fixes: 
e Locate and identify missing package / dependency 


e Do full system update with connected repo 


Network Issues 


e Often involve Network misconfiguration 


e Updates to network devices 


* Ipand dns misconfiguration 


e Missing ethernet driver 
* Quick fixes 


e Check network cable and power 


e Check router and modem 


Logs - /var/log 





Most services logs their activities. Default log path: /var/log 
* kern.log 


— all kernel / devices related logs 


— To check kernel related errors and warnings 
debugging hardware and connectivity issues 


* syslog / messages 





— mainly used to store informational and non-critical 
system messages. 


— To track non-kernel boot errors, application related 
service errors and the messages that are logged 
during system startup. 


Logs - /var/log 
* auth.log 


— all login authentication logs including both local 
and remote logins 


— To investigate failed login attempts, brute-force 
attacks and other vulnerabilities related to user 
authorization mechanism. 


* dmesg / daemon.log 





— Kernel ring buffer messages 


— To check a hardware Is functioning improperly or 
not getting detected and all services running as 
daemons like cron 


Logs - /var/log 


* cups/* 
* all printer related logs 


* To check printer connectivity status , access and 
permissions errors 


* clamav/* 
+ all clamav antivirus related logs 


* To check antivirus database update errors 





° apt/* and dpkg.log 
* Package updates and install logs 


* To check what are the packages installed and removed in 
the system 


Logs 


* Service logs - systemd and init services 
e  /etc/init.d/gdm3 status 
* Systemctl status gdm3 

e To query journactl without opening raw log file 
*  journalctl -b 


* To show data only from current boot 





* journalctl -a 


* To show all consolidated logs 


*  journalctl -k 


e Show only kernel logs 


Hardware info 


e List all PCI devices 
e |spci and lspci -v 

* List all usb devices connected currently 
+ |susb and ISusb -v 

e List all hardware info and export to html file 
* |shw -html » /tmp/Ishw.file 


e Check RAM free space and swap space 





* free-m - to list as MB 


e GUI interface for all above 


e hwinfo 


Disk Info 


e List all devices : sudo fdisk -l 

e List all partitions blockid / uuid: sudo blkid 
* List of mounted partitions: mount 

e Used and available disk space: df -h 

* Filesystem scanning for errors: | sudo fsck 


* GUI to perform disk checking: 





e gnome-disks (or) Applications Utilities > Disks 
e GUI to check filesystem usage 


e baobab (or) Applications > Utilities > Disk Usage Analyzer 





Network Info 


e Check IP and mac info : sudo ifconfig 
e Check all ips of system: ipa 
e To check network manual configuration 


* [etc/network/interfaces (or) 
e Network manager manual configuration 


e To check dns info 





e Jetc/resolv.conf 


* To view IP routing table : route 


* List all open connections: netstat 





Process info 


e List all process running by all users 


* ps aux 
e Check specific process 
° ps -A | grep ProgramName 
e List process along with CPU and memory consumption 
* top 
e GUI to list and manage all process 


e Qgnome-system-monitor 


i Recovering Grub 


Grub rescue mode 


error: unknown filesystem. Horror: 19 such partition. 


Entering rescue mode... 


grub rescue? Éntering rescue node... 


i grub rescue) .- 





Grub rescue mode 





grub rescue> Is 
(hdO) (hdO,msdos1) (hdO,msdos2) 
grub rescue» Is (hd0,1)/boot 


J ../ .config--3.16.0-4-686-pae initrd.img--3.16.0-4-686-pae 
vmlinuz-3.16.0-4-686-pae grub System.map--3.16.0-4-686- 
pae 


grub rescue>set prefix=(hd0,msdos1)/boot/grub 





grub rescue>set root=(hd0,msdos1)} 


grub rescue»linux  (hd0O,1)/boot/vmlinuz--3.16.0-4-686-pae 
root=/dev/sdal 


grub rescue» initrd (hdO,1)/boot/Initrd.img--3.16.0-4-686-pae 


grub rescue» boot 


Entering rescue mode... 
grub rescue? Is 


(hdB) (hdB,msdos18) (hd8,msdos9) (hdB,nmsdos8) (hd, 
er r eT te I E DTT 


grub rescue) Is (hdB,msdos9)/ 

error: unknown filesysten. 

grub rescue? Is (hdB,msdos18)/ 

error: unknown filesystem. 

grub rescue? is (hdB)/ 

error: unknown filesusten. 

grub rescue? is (hdB,nsdos8)/ 

error: unknown filesysten. 

grub rescue?» Is (hd@,msdos7)/ 

./ ../ lost*found/ var/ etc/ media/ valinuz usr/ sbin/ lib/ lib64/ boot/ biv/ t 
mp/ root/ mnt/ home/ run/ sys/ dev/ proc/ selinux/ srv/ opt/ initrd.img .pulse- 
cookie .pulse/ 

grub rescue? set prefix-(hd8,msdos?)/boot/grub 

grub rescue?» insmod (hd8,msdos?)/boot/grub/linux.nod 

grub rescue?» set root-(hdB,nsdos?) 

grub rescue? is /boot/ 

^ ../ config-3.2.6-4-and64 val inuz-3.2.6-4-and64 grub/ mentest86+_multiboot.bi 
n extlinux/ Syusten.nap-3.2.8-4-amd64 initrd.img-3.2.0-4-amd64 mentestd6+.bin 
grub rescue» linux /boot/unlinuz-3.2.8-4-amd64 root-/dev/sda? 

grub rescue? initrd /initrd.ing 

grub rescue» boot 





Reinstalling grub 


1.Once OS is booted from grub , reinstall grub to make 
it permanently fixed. Open terminal and run 


a) sudo os-prober 
b) sudo grub-install /dev/sda 
C) sudo update-grub2 





2. Replace /dev/sda with appropriate harddisk name. 
Donot proceed it with partition numbers. 


Eg: sdal, sdab5 - not allowed 


Recovering Corrupted filesystem 
/ files 





Recovering Corrupted File system 





1.12 vrsiéh 2 qu. an 
ie me the hotplug events dispalcher: udew 
Synthesizing the initial hotplug events. . done. 
Waiting for “dev to be fully populated. . .! 16.418491] Error: Driver 'pcspkr' 
s already registered, aborting... 
done. 
Setting the system clock. 
Activating swap...done. 
Checking root file system...fsck 1.41.3 (12-Oct-2008) 
/deu/sdal contains a file system with errors, check forced. 
PL CLIS USE 
Inodes that were part of a corrupted orphan linked list found. 


/dev/sdal: UNEKPECTED INCOMSISTENCY; RUN fsck MANUALLY. 
(i.e., without -a or -p options) 
fsck died with exit status 4 


An automatic file system check (fsck) of the root filesystem failed. A manual 
ck must be performed, then the system restarted. The fsck should be performed 
maintenance mode with the root filesystem mounted in read-only mode. 

The root filesystem is currently mounted in read-only mode. À maintenance shel 
will now be started. After performing system maintenance, press CONTROL-D to t 
minate the maintenance shell and restart the system. (warning). 

Cive root password for maintenance 

(or type Control-D to continue): 





Filesystem crash 


1. Possible reasons 


1. Improper shutdown 

2. Improper time settings - resulting In system booted in 
future time 

3. Filesystem corruption due to improper unmount of 


encrypted partitions 


4. Not enough space in filesystem 





. Solutions 
1. Boot system in single user mode and do filesystem check 


2. Boot in troubleshooting mode and delete unwanted files 


For Intranet systems 


1.Boot the system and press “e” in the Grub entry. 
2.Give grub username and password if prompted. 


3. Remove “ro splash gfxpayload=1024x768x106 quiet.... “ 
entries from the line starting with “linux” 


4. Append “rw init=/bin/bash” in the same line 
5. Press "Ctrl+x" and boot the system 


6. The system boots into recovery mode and login with root 
prompt 





7.Run "fsck" in the prompt 
a) Give "y" for all the questions 


b) Run "reboot" on successful finishing of the command. 


For Civilnet - with encrypted FS 


1. Follow steps 1 to 5 as in previous method. Provide encryption 
passphrase when prompted 


2. To scan and detect all LVM partitions , run 
# vgscan 


Reading all physical volumes. This may take a while... 


Found volume group "boss" using metadata type lvm2 
#vgchange -ay 


6 logical volume(s) in volume group "boss" now active 





1. Volumes detect as /dev/<hostname>/vg-usr 
2.Run “fsck” in the prompt for all detected partitions 


fsck /dev/<hostname>/vg-usr 


fsck /dev/<hostname>/vg-var 


Using live cd 


1.Boot a BOSS live cd 


2.Mount the partition which is corrupted and check the 
mount path "Is /media" 


3. Run "df -h" and find out the corresponding /dev/ device 
for the mounted partition. Eg: 


/dev/sdal ---  /media/87649eab-e1f2-4f09-8753- 
1b/ae0d26f35 


4.Run “fsck /dev/sdal” as root user 





5.Give “y” for all the questions 


6.Run "reboot" on successful finishing of the command. 





Recovering lost partition / files 


1. To recover lost partitions / files , install “testdisk” 
— sudo apt-get install testdisk 
2. Open root terminal and run "sudo testdisk" 


3.Select appropriate harddisk and the partitions and select 
"Analyse" in the prompted window 


Select “Deeper Search” and wait till the application 
analyses the entire hard disk and displays the files and 
folders 





.One can recover the entire partition by rewriting the 
partition table ( sometimes make data loss) or recover files 
and folders by taking individual backup 


Limitations: Files deleted via shift--del cannot be recovered 


Filesystem full 


1. /tmp IS full - happens only in Civilnet when user IS 
streaming heavy media In browser sometimes resulting 
in /tmp to be full. Will be cleared automatically within 
next 15 mins (or) delete *cap* files under /tmp 


2. [home Is full - Home folder fills up with user data files. 
g Clear unwanted files and folders 
3 


. /var Is full - unsent logs to server / erroneous log 
creation due to mis-configured devices. Clear all logs 
ends with “.gz” under /var/log 


sudo rm -rf /var/log/*.gz 





i Display Issues 


Gdm / Gnome Display issues 











Gdm / Gnome Display Issues 





1. If error comes before login screen: 


a) 


b) 


C) 
d) 


e) 


Press ctri+alt+F1 and login with admin user 


Ensure network connectivity and connection 
with repo “sudo apt-get update” 


Once done run "sudo apt-get install lightam” 
Choose “lightdm” as default display manager 


Once installed “reboot” and check 





Gdm / Gnome Display Issues 





1. If error comes after login screen and before desktop 
display 


a) In login screen change session to "Gnome 
Classic" and then login 








Gdm / Gnome Display Issues 


1.1f gnome-classic didn't work 


a) Press ctrl+AIt+FI and login as admin user 


b) Run “sudo apt-get install gnome-session- 
flashback “ (or) “sudo apt-get Install 
cinnamon” 





c) Reboot and select appropriate session in the 
login screen and then login 


Common fixes 


1. For intel video cards: 


44 P 


- In grub press "e" and give proper credentials. 
Append “nomodeset” or “i915.modeset=0” at 
the end of the line starting with “linux” and 
reboot 


å Installing AMD video cards: 
- sudo apt-get install fglrx-modules-dkms fglrx-control 


- Run "aticonfig --initial” after booting in F1 terminal 


Common fixes 


3. System boots up but ends up showing only “black 
screen” with a blinking cursor on top. 


Reasons: Issues with video card or power interface 


Fix: boot with "acpi-off" kernel option in grub 





4. Installing non-free firmwares: Many devices require a 
firmware to operate. To install non-free firmware , run 


sudo apt-get install firmware-linux-nonfree 


i Printer Issues 


Printer not working 


1. Check whether printer is connected and powered ON 
2. Restart printer service 
a) Click on the desktop “Start Printer” icon (or) 
b) Open terminal and type “service cups restart” 


3. Open Sundry > Printer and ensure printer is not disabled ; 
if disabled right click and enable it 





4. Open printer properties and ensure the data Is print queue. 


5. Check printer status as admin account ; if working check 
/var/log/cups/access.log and /var/log/cups/error.log for any 
permission issue for normal user. 


Printer not working 


1.USB printer: 
1. Run “lsusb” and check printer is detected 


2. Run “lpinfo -v” to find out if your printer gets detected by 
CUPS 


3. For HP printers run “hpinfo -i” to check whether printer 
gets detected by CUPS 


2. Network printer 





l. Check printer is connected “ping <printer-ip>” 

2. Check printer is detected via LAN through these protocols 
* [usr/lib/cups/backend/snmp 
* /usr/lib/cups/backend/dnssd 


Printer not working - HP 


Job is shown as complete but the printer does nothing 


Some HP printers require non-free firmware to be installed. 
Download appropriate firmware and install online / offline . 
Run “hp-firmare -1 ” to install offline 


"/usr/lib/cups/backend/hp failed" 


Confirm dbus Is running - /etc/Init.d/dbus status 





If network printer try adding it as "http://" protocol 
CUPS: "Filter failed" 


Change the ppd file for the configured printer 


